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Abstract 



Given a Boolean function /, we study two natural 
generalizations of the certificate complexity C (/): 
the randomized certificate complexity RC (/) and 
the quantum certificate complexity QC(f). Using 
Ambainis' adversary method, we exactly character- 
ize QC (/) as the square root of RC(f). We then 
use this result to prove the new relation Rq (/) = 

o(q 2 if) 2 Qo (/) l°g n ) f° r total /, where R , Q 2 , 
and Qo are zero-error randomized, bounded-error 
quantum, and zero-error quantum query complexi- 
ties respectively. Finally we give asymptotic gaps 
between the measures, including a total / for which 
C(f) is superquadratic in QC (/), and a symmet- 
ric partial / for which QC (/) = O (1) yet Q 2 (/) = 
0, (n/ log ft). 

1 Background 

Most of what is known about the power of quantum 
computing can be cast in the query or decision-tree 
model @, |, |, | | g 0, H §§. Here 
one counts only the number of queries to the input, 
not the number of computational steps. The ap- 
peal of this model lies in its extreme simplicity — in 
contrast to (say) the Turing machine model, one feels 
the query model ought to be 'completely understand- 
able.' In spite of this, open problems abound. 

Let / : Dom (/) — > {0, 1} be a Boolean func- 
tion with Dom(f) C {0,1}", that takes input Y — 
yi . . .y n . Then the deterministic query complexity 
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D (/) is the minimum number of queries to the y^s 
needed to evaluate /, if Y is chosen adversarially and 
if queries can be adaptive (that is, can depend on the 
outcomes of previous queries). Also, the bounded- 
error randomized query complexity, R 2 (/), is the 
minimum expected number of queries needed by a 
randomized algorithm that, for each Y £ Dom(f), 
outputs / (Y) with probability at least 2/3. Here 
the '2' refers to two-sided error; if instead we require 
/ (Y) to be output with probability 1 for every Y, we 
obtain Rq (/), or zero-error randomized query com- 
plexity. 

Analogously, Q 2 (/) is the minimum number of 
queries needed by a quantum algorithm that out- 
puts / (Y) with probability at least 2/3 for all Y. 
Also, for k £ {0, 1} let Qo (f) be the minimum num- 
ber of queries needed by a quantum algorithm that 
outputs / (Y) with probability 1 if / (Y) = k, and 
with probability at least 1/2 if / (Y) ^ k. Then let 
Qo (/) = max (/) , (/)}. If we require a sin- 
gle algorithm that succeeds with probability 1 for all 
Y, we obtain Qe (/), or exact quantum query com- 
plexity. See [0 for detailed definitions and a survey 
of these measures. 

It is immediate that Q 2 (/) < R 2 (/) < R (f) < 
D (/) < n, that Qo (/) < Ro (/), and that Q E (/) < 
D(f). If / is partial (i.e. Dom(f) ± {0,1}™), 
then Q 2 (/) can be superpolynomially smaller than 
R 2 (/); this is what makes Shor's period- finding al- 
gorithm [p| possible. For total /, by contrast, the 
largest known gap even between D (/) and Q 2 (/) is 
quadratic, and is achieved by the OR function on n 
bits: D (OR) = n (indeed R 2 (OR) =Q(n)), whereas 
Q 2 (OR) = Q (y/n) because of Grover's search algo- 
rithm [f]|]. Furthermore, for total /, Beals et al. || 

showed that D (f) = O (<Q 2 (/) 6 ) , while de Wolf || 
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showed that D(f) = (q 2 (ff Q (ff 

The result of Beals et al. |(| relies on two interme- 
diate complexity measures, the certificate complexity 
C (/) and block sensitivity bs(f), which we now de- 
fine. 

Definition 1 A certificate for an input X is a set 
S C {l,...,n} such that for all Y G Dom(f), if 
Vl = Xi for all i G S then f (Y) = f(X). Then 
C x (/) is the minimum size of a certificate for X , 
and C (/) is the maximum of C x (/) over all X. 

Definition 2 A sensitive block on input X is a set 
B C {l,...,n} such that f (X^) ^ f(X), where 
X^ is obtained from X by flipping xi for each i € 
B. Then bs x (/) is the maximum number of disjoint 
sensitive blocks on X , and bs (/) is the maximum of 
bs x (f) over all X. 

Clearly bs (/) < C (/) < D(f). For total /, 
these measures are all polynomially related: Nisan 
|J| showed that C (/) < bs (ff, while Beals et 
al. §] showed that D (/) < C(f)bs(f). Combin- 
ing these results with bs (f) = O (Q2 (f)j (from 
the optimality of Grover's algorithm), one obtains 
D(f) = 0(Q 2 {ff). 

2 Our Results 

We investigate RC (f) and QC(f), the bounded- 
error randomized and quantum generalizations of the 
certificate complexity C (/) (see Table 1). Our moti- 
vation is that, just as C (/) was used to show a poly- 
nomial relation between D (/) and Q2 (/), so RC (/) 
and QC (/) can lead to new relations among funda- 
mental query complexity measures. 



Table 1 




Query complexity 
Certificate complexity 


D(f) 
C(f) 


R2U) 
RC(f) 


Q2 (/) 

QC{f) 



What the certificate complexity C (/) measures is 
the number of queries used to verify a certificate, not 
the number of bits used to communicate it. Thus, 
if we want to generalize C (/), we should assume the 
latter is unbounded. A consequence is that without 
loss of generality, a certificate is just a claimed value 



X for the input — since any additional information 
that a prover might provide, the verifier can compute 
for itself. The verifier's job is to check that / (Y) = 
f (X). With this in mind we define RC (/) as follows. 

Definition 3 A randomized verifier for input X is 
a randomized algorithm that, on input Y G Dom (/), 
(i) accepts with probability 1 ifY — X, and (ii) rejects 
with probability at least 1/2 if f (Y) ^ f (X). (If 

V =/= X but f (Y) = f (X), the acceptance probability 
can be arbitrary.) Then RC X (/) is the minimum 
expected number of queries used by a randomized ver- 
ifier for X , and RC (/) is the maximum of RC X (f) 
over all X . 

We define QC (/) analogously, with quantum in- 
stead of randomized algorithms. The following jus- 
tifies the definition (the RC (/) part was originally 
shown by Raz et al. JT^|). 

Proposition 4 Making the error probability two- 
sided rather than one-sided changes RC (f) and 
QC (f) by at most a constant factor. 

Proof. For RC (/), let ry be the event that verifier 

V rejects on input Y, and let dy be the event that 

V encounters a disagreement with X on Y. We may 
assume Pr [ry \ dy] — 1. Suppose that Y = X and 
/ (Y) 7^ / PO both occur with probability 1/2, and 
that Pr [ry] < £0 in the former case and Pr [ry] > 
1 — £1 in the latter. Then 

Pr [r v ] 

" I -ex 

Now let V* be identical to V except that, whenever 

V rejects despite having found no disagreement with 
X, V* accepts. Clearly Pr [r x »] — 0. Also, in the 
case /(F)^/ (X), 

Pr [r£.]=Pr [d v ] 



Y 1 Yl 



> Pr [r v ] Pr [dy , , v 



1 Throughout this paper, we use Y to denote the 'actual' in- 
put being queried, and X to denote the 'claimed' input (whose 
randomized certificate complexity, block sensitivity, and so on 
we want to study). 
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For QC (/), suppose the verifier's final state given 
input Y is 



7 Z 



ID) 



where |0) is the reject state, |1) is the accept state, 

and \0%\ + = 1 for all z. Suppose also that 

A x > 1 - e Q and that A Y < e\ whenever / (V) ^ 

/ (X), where A Y = J2 Z \ a Y"fY\ ^ s tne probability of 
accepting. Then the verifier can make A x = 1 by 
performing the conditional rotation 



7? 



-Pi 
„ x 



x 



on the second register prior to measurement, 
case / (Y) ^ f (X), this produces 



In the 



Z 

< 2 EKf (I/? 

Z 

< 2(e + e 1 ). 



+ hi 



It is immediate that QC (/) < RC (/) < C (f), 
that QC(/) = 0(Q 2 (f)), and that i?C (/) = 
O (i? 2 (/))■ We also have RC (/) = ft (bs (/)), since 
a randomized verifier for X must query each sensitive 
block on X with 1 /2 probability. This suggests view- 
ing i?C (/) as an 'alloy' of block sensitivity and certifi- 
cate complexity, an interpretation for which Section 
^ gives some justification. 

Our results are as follows. . In Section we show 
that QC{f) 



6 (y i?C {f)j for all / (partial or 

total), precisely characterizing quantum certificate 
complexity in terms of randomized certificate com- 
plexity. To do this, we first give a nonadaptive char- 
acterization of RC (/), and then apply the adver- 
sary method of Ambainis || to lower-bound QC (/) 
in terms of this characterization. Then, in Sec- 
tion |5|, we extend results on polynomials due to 
de Wolf |22j and to Nisan and Smolensky (as de- 
scribed by Buhrman and de Wolf to show that 
R (f) = 0(RC(f)ndeg(f)logn) for all total /, 
where ndeg (/) is the minimum degree of a polyno- 
mial p such that p (X) ^ if and only if / (X) ^ 0. 
Combining the results of Sections ^ and || leads to a 



new lower bound on quantum query complexity: that 
Ro if) = O (Q 2 {ff Qo (f) logn) for all total /. To 
our knowledge, this is the first quantum lower bound 
to use both the adversary method and the polynomial 
method at different points in the argument. 

Finally, in Section ^, we exhibit asymptotic gaps 
between RC (/) and other query complexity mea- 
sures, including a total / for which C (/) = 

{QC (/) 2 ' 205 ^ , and a symmetric partial / for which 

QC(f) = 0(1) yet Q 2 (f) = fi(n/logn). We con- 
clude in Section [7] with some open problems. 



3 Related Work 

Raz et al. [ fl5[ studied a query complexity measure 
they called ma(f), for Merlin- Arthur. In our no- 
tation, ma (/) equals the maximum of RC X (/) over 
all X with f (X) = 1. Raz et al. observed that 
ma (/) = ip (/), where ip (/) is the number of queries 
needed given arbitrarily many rounds of interaction 
with a prover. They also used error-correcting codes 
to construct a total / for which ma (/) = O (1) but 
C (/) = f2(n). This has similarities to our con- 



struction, in Section 6.3, of a symmetric partial / 
for which QC(f) = 0(1) but Q 2 (/) = SI (n/ log n). 
Aside from that and from Proposition ||, Raz et al.'s 
results do not overlap with ours. 

Watrous [^9) has investigated a different notion 
of 'quantum certificate complexity' — whether certifi- 
cates that are quantum states can be superpolynomi- 
ally smaller than any classical certificate. Also, de 



Wolf 1 21 1 has investigated 'nondeterministic quantum 
query complexity' in the alternate sense of algorithms 
that accept with zero probability when f (Y) = 0, 
and with positive probability when f (Y) = 1. 



4 Characterization of Quantum 
Certificate Complexity 

We wish to show that QC (f) = 6 (yi?C(/)) . pre- 
cisely characterizing quantum certificate complexity 
in terms of randomized certificate complexity. The 
first step is to give a simpler characterization of 
RC(f). 
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Lemma 5 Call a randomized verifier for X non- 
adaptive if on input Y , it queries each yt with in- 
dependent probability \, and rejects if and only if 
it encounters a disagreement with X. (Thus, we 
identify such a verifier with the vector (Ai, . . . , X n ).) 
Let RC x a (/) be the minimum of Ai + • • • + X n over 
all nonadaptive verifiers for X. Then RC x a (f) — 

e(RC x (f)). 

Proof. Clearly RC x a (/) = il (RC X (/)). For the 
upper bound, we can assume that a randomized ver- 
ifier rejects immediately on finding a disagreement 
with X, and accepts if it finds no disagreement. Let 
y = {Y : f (Y) ^ f (X)}. Let V be an optimal ran- 
domized verifier, and let pt (Y) be the probability 
that V , when given input Y G y, finds a disagreement 
with X on the t th query. By Markov's inequality, V 
must have found a disagreement with probability at 
least 1/2 after T = \2RC X (/)] queries. So by the 
union bound 

Pi(Y) + ---+ PT (Y) > 1/2 

for each Y G y. Suppose we choose t G {1, . . . , T} 
uniformly at random and simulate the t th query, pre- 
tending that queries 1, . . . ,t — 1 have already been 
made and have returned agreement with X. Then 
we must find a disagreement with probability at least 
1/2T. By repeating this procedure AT times, we can 
boost the probability to 1 — e~ 2 . For i G {1, . . . , n}, 
let Ai be the probability that yi is queried at least 
once. Then Ai + • • • + A„ < AT, whereas for each 

Yey, 

E A^l-e" 2 . 

It follows that, if each y^ is queried with independent 
probability Aj, then the probability that at least one 
Ui disagrees with X is at least 

r -, —2 \ n 

1- JJ (1- AO > 1- (l- ~ n 6 ) >0.57. 

■ 

To obtain a lower bound on QC (/), we use the fol- 
lowing simple reformulation of the adversary method 
of Ambainis . 

Theorem 6 (Ambainis) Let ft be a function from 
Dom (/) to nonnegative reals, and let R : 



Dom (f) 2 — > {0, 1} be a relation such that R (X, Y) — 
R (Y, X) for all X, Y and R (X, Y) = whenever 
f (X) = f{Y). Let 8 ,Si G (0,1] be such that for 
every X € Dom (/) and i G {1, . . . , n}, 

Y:R(X,Y)=1 

E P(Y)<5 nx) . 

Then Q 2 (/)=0(^5). 
We now prove the main result of the section. 

Theorem 7 For all f (partial or total) and all X , 
QC X (f) = O^RC x (/)). 

Proof. Let (Ai, . . . , A n ) be an optimal nonadaptive 
randomized verifier for X, and let 

S = Ai + ... + An. 

First, QC X (/) = O (VBj . We can run a "weighted 
Grover search," in which the proportion of basis 
states querying index i is within a constant factor 
of Xi/S. (It suffices to use n 2 basis states.) Let 
y = {Y : / (Y) + f (A)}; then for any Y e y, 

O (v^J iterations suffice to find a disagreement with 
X with probability f2 (1). 

Second, QC X (/) = fi (v/s) . Consider a matrix 
game in which Alice chooses an index i to query and 
Bob chooses Y £ y; Alice wins if and only if yi ^ 
xt . If both players are rational, then Alice wins with 
probability 0(1/S), since otherwise Alice's strategy 
would yield a verifier (A' x , . . . , A^) with 

a' 1 + --- + a; = (s). 

Hence by the minimax theorem, there exists a distri- 
bution fi over y such that for every i, 

Pr [ yi ^ Xi ] = 0{l/S). 

YEfi 

Let (3 (X) — 1 and let (3 (Y) = fi (Y) for each Y G 
Also, let R (Y, Z) = 1 if and only if Z = X 
for each F £ J and Z ^ y. Then we can take 
<5y(y) = 1 and <5/(x) = 0(l/S) in Theorem ^]. So 
the quantum query complexity of distinguishing X 

from an arbitrary Y G y is f2 1 Vol . ■ 
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5 Quantum Lower Bound for 
Total Functions 

Our goal is to show that 

Ro(f) = o(Q 2 (/) 2 Qo(/)logn) . 

Say that a real multilinear polynomial p (xi, . . . , x n ) 
nondeterministically represents / if for all X G 
{0,1}", p(X) ^ if and only if f {X) ^ 0. Let 
ndeg (/) be the minimum degree of a nondeterminis- 
tic polynomial for /. Also, given such a polynomial 
p, say that a monomial Mi G p is covered by M 2 G p 
if M2 contains every variable in Mi. We call M a 
maxonomial if it is not covered by any other mono- 
mial of p. The following is a simple generalization of 
a lemma attributed in |Tcj to Nisan and Smolensky. 

Lemma 8 (Nisan-Smolensky) Let p nondeter- 
ministically represent f. Then for every maxono- 
mial M of p and X G / _1 (0), there is a set B of 
variables in M such that f {X^ B ^ ^ f(X), where 
X( B ) is obtained from X by flipping the variables in 
B. 

Proof. Obtain a restricted function g from /, and a 
restricted polynomial q from p, by setting each vari- 
able outside of M to xt. Then g cannot be constant, 
since its representing polynomial q contains M as a 
monomial. Thus there is a subset B of variables in 
M such that g (X^) = 1, and hence / (X^) = 1. 
■ 

Using Lemma ||, de Wolf Q showed that D (/) < 
C (/) ndeg (/) for all total / (slightly improving the 
result D (f) < C (f) deg (/) due to Buhrman and de 
Wolf In Theorem |l0[ we will give an ana- 

log of this result for randomized query and certificate 
complexities. However, we first need a probabilistic 
lemma. 

Lemma 9 Suppose we repeatedly apply the following 
procedure: first identify the set B of maxonomials of 
p, then 'shrink' each M G B with (not necessarily 
independent) probability at least 1/2. Shrinking M 
means replacing it by an arbitrary monomial of de- 
gree deg (M) — 1. Then with high probability p is a 
constant polynomial after O (deg (p) log n) iterations. 



Proof. For any set A of monomials, consider the 
weighting function 

oj(A)= deg(M)! 

Let S be the set of monomials of p. Initially 

lu(S) < n dcg(p) deg(p)! 

and we are done when u> (S) = 0. We claim that at 
every iteration, u (B) > ~li (S). For every M* G S\ 
B is covered by some M G B, but a given M G B can 
cover at most ( dc s[ M )) distinct M* with deg(M*) = 
I . Hence 

deg(A/)-l 

«(s\b)<£ E ( dcs H' ! 

MGB 1=0 

< £ deg(M)!(i + i + ...) 

< (e-l)w{B). 

At every iteration, the contribution of each M G B to 
us (A) has at least 1/2 probability of shrinking from 
deg(M)! to (deg(M) - 1)! (or to if deg (M) = 1). 
Hence u> (S) decreases by an expected amount at least 
±lu(S). Thus after 

log 4e /(4e-i) (2n dc ^ deg (p)l) = O (deg (p) logn) 

iterations, the expectation of u> (S) is less than 1/2, 
so S is empty with probability at least 1/2. ■ 

Theorem 10 For total f, 

R (f) = 0(RC(f)ndeg(f)logn). 

Proof. Choose an X with / (X) — 0, and let 
(Ai, . . . , A„) be a nonadaptive randomized verifier for 
X. Form I C by placing each i in I 

with independent probability A^. Then for any Z G 
{0, 1}™, let be obtained from Z by setting Zi to 
Xi for each i G I. We have Pr z [/ (Z^) = 0] > 1/2. 
But by Lemma || for every maxonomial M of /, there 
exists a Z that disagrees with X only on variables oc- 
curring in M, such that f (Z) — 1. It follows that 
for every M, I contains the index of a variable in M 
with probability at least 1/2. 
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Given input Y, the randomized algorithm is as fol- 
lows. First query the indices in /, and let f\ be the 
restriction of / induced by this. Then repeat the 
above procedure on f\ — that is, choose an X\ with 
/i (Xl) = (assuming one exists), and then query a 
set I\ drawn using a nonadaptive randomized verifier 
for X\ . Continue in this manner until / is restricted 
to a constant function fx- At this point, if fx is 
identically then we know / (Y) — 0; otherwise we 
know/(F) = l. 

Each iteration of the algorithm uses an expected 
number of queries at most RC (f), since RC (g) < 
RC (/) for every restriction g of /. Further- 
more, since an iteration shrinks each maxonomial 
with probability at least 1/2, Lemma ^| implies that 
with r2 (1) probability, fx is constant after T = 
O (ndeg (/) log n) iterations. ■ 

Buhrman et al. || showed that ndeg (/) < 
2Qo (/). Combining this with Theorems ^| and [To| we 
obtain a new relation between classical and quantum 
query complexity. 

Theorem 11 For total f , 

Ro(f) = o(Q 2 (f) 2 Q Q (/)logn). 

The best previous relation of this kind was 
(/) = O (Q 2 (ff Q iff) , due to de Wolf @. 

6 Asymptotic Gaps 

Having related RC (/) and QC (f) to other query 
complexity measures in Section ^ in what follows 
we seek the largest possible asymptotic gaps among 
the measures. In particular, Section ^O] gives a 

total / for which RC (f) = 9 (c (f) 907 ) and 



N 2.205 



as well as a total 

0.922 s 



hence C (/) = B [QC (f) 

f for which bs (/) = 6 [RC (/) u a ^J . Although 

thes e ga ps are the largest of which we know, Sec- 
tion p.2] shows that no 'local' technique can improve 

the relations C (/) = O [RC (/) 2 ) and RC (/) = 

O (bs (/) 2 ^ . Finally, Section [T^ uses combinato- 
rial designs to construct a symmetric partial / for 
which RC{f) and QC (/) are 0(1), yet Q 2 (/) = 
f2 (nj logn). 



6.1 Certificate Complexity, Random- 
ized Certificate Complexity, and 
Block Sensitivity 

Wegener and Zadori |2(]] exhibited total Boolean 
functions with asymptotic gaps between C (/) and 
bs(f). In similar fashion, we give a function fam- 
ily {g t } with an asymptotic gap between C (gt) and 
RC (gt). Let <?i (xi, . . . , X29) equal 1 if and only if 
the Hamming weight of its input is 13, 14, 15, or 16. 
(The parameter 29 was found via computer search to 
produce a maximal separation.) Then for t > 1, let 

g t (xi, . . .,x 29 t) = g [g t -i (Xi) , . . . ,.g t -i (X 2 g)] 

where X\ is the first 29*" 1 input bits, X 2 is the second 
29'- 1 , and so on. For k e {0, 1}, let 

bs k (/) = max bs x (/) , 

f(X) — k 

C k (f) = max C x (f) . 
W ' f{x)=k u ; 

Then since bs (gi) = bs 1 (gi) = 17, we have bs (g t ) = 
17*. On the other hand, C° (31) = 17 but C 1 (g{) = 
26, so 

C 1 (g t ) = 13C 1 (g t -!) + 13C° (g^) , 
C° (g t ) = ^maxjC 1 (g t ^) , C° (g t ^)} . 

Solving this recurrence yields C (g t ) = 6(22.725*). 
We can now show a gap between C and RC. 

Proposition 12 RC (g t ) = 6 (c (g t )° 907 ) ■ 

Proof. Since bs(g t ) = yC (gt)°' 9 ° 7 ^j , it suffices 
to show that RC (gt) = 0(bs(g t )). The random- 
ized verifier V chooses an input variable to query 
as follows. Let X be the claimed input, and let 
K = TZi 9t-i (Xi)- Let J = {i : g t -i (X % ) = 0} 
and l\ — {i : g t -\ (Xi) = 1}. With probability Pk , 
V chooses an i € I\ uniformly at random; otherwise 
A chooses an i £ Iq uniformly at random. Here px 
is as follows. 



K 


[0, 12] 


13 


14 


15 


16 


[17,29] 


PK 





13 
17 


7 

12 


5 

12 


4 

17 


1 



Once i is chosen, V repeats the procedure for Xi, and 
continues recursively in this manner until reaching a 
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variable yj to query. One can check that if g t (X) ^ 
g t (Y), then g t _ x (Xi) ^ g t -i (Yt) with probability at 
least 1/17. Hence Xj ^ yj with probability at least 
1/17*, and RC(g t ) =0(17'). ■ 

By Theorem 0, it follows that C (g t ) — 
9 (QC (gt) 2 ' 2 °°^j ■ This offers a surprising contrast 
with the query complexity setting, where the best 
known gap between the deterministic and quantum 
measures is quadratic (D (/) = 9 (q 2 (/) 2 ))- 

The family {g t } happens not to yield an asymptotic 
gap between bs (/) and RC (/). The reason is that 
any input to go can be covered perfectly by sensitive 
blocks of minimum size, with no variables left over. 
In general, though, we can have bs (/) = o (RC (/)). 
As reported by Bublitz et al. M. Paterson found 
a total Boolean function hi (xi, . . . ,Xq) such that 
C x (hi) = 5 and bs x (hi) = 4 for all X. Com- 
posing hi recursively yields bs (h t ) — 9 ((J (h t )°' 861 ^j 

and bs(h t ) = 9 [RC (h t f m2 ^ , both of which are 
the largest such gaps of which we know. 

6.2 Local Separations 

It is a longstanding open question whether the re- 

\2 



lation C(f) < bs (/) due to Nisan |12 is tight 



As a first step, one can ask whether the relations 
C(f) = (RC (ff) and RC (/) = O (bs (/) 2 ) are 
tight. In this section we introduce a notion of lo- 
cal proof in query complexity, and then show there 



is no local proof that C (f) = o \^RC (/)"J or that 

RC (/) = o (bs (f) 2 ^j ■ This implies that proving ei- 
ther result would require techniques unlike those that 
are currently known. Our inspiration comes from 
computational complexity, where researchers first for- 
malized known methods of proof, including relativiz- 
able proofs and natural proofs Jl6| , and then ar- 
gued that these methods were not powerful enough 
to resolve the field's outstanding problems. 

Let G (/) and H (f) be query complexity mea- 
sures obtained by maximizing over all inputs — that 



G(f) 



max XeDom r f ) G x (f) and H (/) 



maxxeDom(f) H x (/). Call B C {1, . . . , n} a min- 
imal block on X if B is sensitive on X (meaning 
/ (X^) ^ f (X)), and no sub-block B' C B is sensi- 
tive on X. Also, let X's neighborhood Af (X) consist 



of X together with X^ for every minimal block B 
of X. Consider a proof that G(f) = (t (H (/))) for 
some nondecreasing t. We call the proof local if it 
proceeds by showing that for every X S Dom (/), 



G x (/) = O 



max {t(H Y (f))\ 



As a canonical example, Nisan's proof |l2[ that 
C (/) < bs (f) 2 is local. For each X, Nisan observes 
that (i) a maximal set of disjoint minimal blocks is 
a certificate for X, (ii) such a set can contain at 
most bs x (/) blocks, and (iii) each block can have 
size at most maxY£_\f(x)bs Y (f). Another exam- 
ple of a local proof is our proof in Section |] that 

RC(f) = 0(QC(ff). 

Proposition 13 There is no local proof that C (/) = 
o (RC (/) 2 ) or that RC (/) = o (bs (J) 2 ) for total f. 

Proof. The first part is easy: let / (X) = 1 if \X\ > 
y/n (where \X\ denotes the Hamming weight of X), 
and / (X) = otherwise. Consider the all-zero input 
0™. We have C°" (/) = n- ^+1, but RC " (/) = 
O (y/n), and indeed RC Y (/) = O (y/n) for all Y G 
Af(Q n ). 

For the second part, arrange the input variables 
in a lattice of size y/n x y/n. Take m — O (n 1 / 3 ) , 
and let g (X) be the monotone Boolean function that 
outputs 1 if and only if X contains a 1-square of size 
to x 777. This is a square of l's that can wrap around 
the edges of the lattice; note that only the variables 
along the sides must be set to 1, not those in the 
interior. An example input, with a 1-square of size 
3 x 3, is shown below. 





10 11 

10 10 

10 11 

Clearly bs° (g) — 9 (ti 1 / 3 ) , since there can be at 
most n/m 2 disjoint 1-squares of size m x m. Also, 
bs Y (g) — 9 (ti 1 / 3 ) for any Y that is except for a 
single 1-square. On the other hand, if we choose 
uniformly at random among all such Y's, then at 
any lattice site i, Pry [y< = 1] = 9 (ti -2 / 3 ). Hence 

i?C "( 3 ) = ft(T7 2 / 3 ). ■ 
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6.3 Symmetric Partial Functions 

If / is partial, then QC (/) can be much smaller than 
Qi (/)• This is strikingly illustrated by the collision 
problem: let Y = (y%, . . . , y n ) be a sequence of inte- 
gers in the range {l, . . . , n 2 }, each of which can be 
retrieved by a single query. Let Col (Y) — if Y 
is one-to-one (each yi is unique), and Col (Y) = 1 if 
Y is two-to-one (each j/, appears exactly twice), un- 
der the promise that one of these is the case. Then 
RC{Col) = QC(Col) = 0(1), since every one-to- 
one input differs from every two-to-one input on at 
least n/2 of the yi's. On the other hand, Aaronson 
§ showed that Q 2 (Col) = ft^ 1 / 5 ), and Shi 
improved this to ft (n 1 / 3 ), which is tight 0. 

From the example of the collision problem, it is 
tempting to conjecture that (say) Q 2 (/) = O (n 1 / 3 ) 
whenever QC (/) = O (1) — that is, 'if every O-input 
is far from every 1-input, then the quantum query 
complexity is sublinear.' Here we disprove this con- 
jecture, even for the special case of symmetric func- 
tions such as Col. (For a finite set Tt, we say that 
/ : H n — > {0, 1} is symmetric if y\ . . . y n £ Dom (/) 
implies y <T(1) . . . y a ( n) G Dom (f) and f (yx . . . x n ) = 
f (v<y(i) ■ ■ ■ Vcr(n)) for every permutation a.) 

Our proof uses the following lemma, due to Nisan 
and Wigderson E3 . 

Lemma 14 (Nisan- Wigderson) For any 7 > 1, 

there exists a family of sets 

Si,...,S m C {1,..., \-fn}} 

such that m — ft(2"/ 7 ), \Si\ — n for all i, and 
I & Sj\ < n/7 for all i -/= j. 

We will also need to adapt a lemma of Ambainis 
||. For Z E {0, 1}^, say that a multivariate polyno- 
mial p (Z) approximates g (Z) if (i) p (Z) £ [0, 1] for 
every input Z (not merely those in Dom (/)), and (ii) 
\p (Z) - g (Z)\ < 1/3 for every Z e Dom (/). Also, 

letA(A,d)=Eto CD- 
Lemma 15 (Ambainis) At most 2 °( A(Ar ' d)tiAr2 ) 
distinct Boolean functions (partial or total) can be 
approximated by polynomials of degree d. 

We can now prove the main result. 



Theorem 16 There exists a symmetric partial f for 
which QC{f) =0(1) and Q 2 (/) =fi(n/logn). 

Proof. Let / : H n -► {0, 1} where H = {!,..., 3n}, 
and let m = ft (2"/ 3 ). Let Si, . . . , S m C H be as 
in Lemma |l4]. We put (j/i, . . . , y„) in Dom (/) if 
and only if {yi, . . . , y n } = Sj for some j. Clearly 
QC (/) = O (1), since if i 7^ j then every permutation 
of Si differs from every permutation of Sj on at least 
n/3 indices. 

The number of symmetric / with Dom (/) as above 

is 2 m = 2 \ /. We can convert any such / to 
a Boolean function g on O(nlogn) variables. But 
Beals et al. || showed that, if Q2 (g) = T, then g is 
approximated by a polynomial of degree at most 2T. 
So by Lemma [l5|, if Q2 (g) < T for every g then 



t/3 



2T • A (n log n, 2T) • (n log n) = ft f 2 
and we solve to obtain T = ft (n/ logn). ■ 



7 Open Problems 



Is deg (/) = ft [y/RC{f)j , where deg (/) is the min- 
imum degree of a polynomial approximating /? In 
other words, can one lower-bound QC (/) using the 
polynomial method of Beals et al. Jq j, rather than 
the adversary method of Ambainis H? 



Also, is i? 2 (/) = O [RC (fyj ? If so we obtain 
the new relation R 2 (/) = O (q 2 (/) 4 ) ■ 
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